Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
File:                     EzSVRauL_SZSc-jUhDuYvwtBSPI.mft (raw, json)
Hash identifier:          hTzHUuupiBfauqBnSNMfB0z9cNnOoOVISJX50KkjLNE=
Subject key identifier:   60:9A:75:65:49:98:00:88:D8:86:BB:42:0A:07:F8:25:93:BD:2A:25
Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
Certificate issuer:       /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Certificate serial:       01962ECFCC094CA2F860FCB7C49F17937274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: EzSVRauL_SZSc-jUhDuYvwtBSPI.crl (hash: arT5qaKitmETQzSKk8ySe3ZBTtIfBEbYQT7MHKkvx2U=)
                          2: z4wrQiroOiNSFdcGbPHcbs9V-dU.roa (hash: yP/GR3Nqgj7O85i1wNDr+BiQRFYWk5p1kifG1naqNAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cc:09:4c:a2:f8:60:fc:b7:c4:9f:17:93:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=609a756549980088d886bb420a07f82593bd2a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:d2:a7:4f:e1:b8:f9:b9:6b:39:1f:de:e4:
                    fd:4c:0b:98:e9:b1:cb:cb:ee:09:cf:24:fc:05:a3:
                    9b:da:88:6e:73:bd:c7:b4:43:7f:af:45:26:b1:fa:
                    84:c9:dc:bb:87:04:4e:c9:92:58:4e:76:c3:9d:30:
                    db:4e:0f:f8:56:13:1a:d3:db:a3:45:73:ea:55:40:
                    37:a1:23:62:82:a0:d6:e2:fe:14:37:8e:42:93:77:
                    48:34:8a:eb:bc:ae:fb:61:4c:66:58:8c:8d:24:ce:
                    6f:38:92:fc:3f:7a:97:d1:34:b7:56:68:d8:29:32:
                    94:1e:39:8b:a6:f2:b4:85:a4:05:63:1e:54:bd:b1:
                    f4:76:05:00:ee:72:02:ff:f5:63:f3:dd:fa:09:11:
                    81:73:07:aa:ee:1d:59:ab:2e:22:6b:9c:22:40:63:
                    56:96:70:87:27:d9:eb:dc:e3:73:c1:cd:da:be:e1:
                    4f:9e:38:e8:7f:68:0f:1f:f7:f7:a5:4f:9e:e9:ad:
                    9e:f9:81:a7:96:78:77:d5:37:f1:fb:d5:7c:8a:26:
                    34:00:8c:b5:26:d1:00:b5:5a:8d:38:fc:2c:04:16:
                    28:a5:b8:4d:97:5c:ee:34:65:0e:2a:3e:7d:56:59:
                    7f:9e:63:f5:b0:b5:4a:b2:d0:aa:1d:39:0f:56:1b:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9A:75:65:49:98:00:88:D8:86:BB:42:0A:07:F8:25:93:BD:2A:25
            X509v3 Authority Key Identifier:
                keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:3e:48:4f:5f:54:43:24:86:0b:70:23:01:4d:fa:10:84:
         f4:38:2e:0f:85:28:d6:6e:41:d1:65:75:f8:0a:f9:b1:ad:23:
         39:f5:4b:a6:df:6c:69:55:5b:da:52:bd:6e:6e:e9:cd:b0:ce:
         4b:50:7d:0c:d6:2a:f6:1e:5e:57:dc:b5:9c:58:8e:b8:51:78:
         27:17:57:de:7c:41:d1:88:7d:31:a7:20:84:fa:66:05:0b:bd:
         0b:c9:41:2c:00:8a:a3:95:1f:e7:73:da:d2:b9:8b:da:aa:6e:
         36:e2:23:35:b9:cb:9a:99:80:a0:15:fe:67:a9:ff:36:d0:a6:
         30:5f:5f:12:3d:72:d5:03:f9:a2:a8:21:f2:9b:71:6f:21:a7:
         0f:7a:4c:44:28:9f:6b:0d:68:7a:e3:d3:d9:5d:87:e8:ca:b8:
         40:e7:bb:45:f5:57:b0:12:f5:b8:ef:f9:13:3f:b0:4a:a7:11:
         6b:52:76:80:e5:07:b4:a4:ca:d1:93:e9:73:68:60:72:81:43:
         89:3f:17:11:18:41:25:c8:98:f0:6c:8d:b7:3d:9b:1b:59:d4:
         2e:e7:e5:1a:92:45:01:fc:44:a8:99:17:92:fb:e6:c0:b0:5f:
         ba:84:1d:45:b2:01:8c:c6:79:48:66:4e:fc:3c:82:5f:3e:db:
         23:35:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----